[Bug 1124610] VUL-1: CVE-2019-3826: golang-github-prometheus-prometheus: Stored DOM cross-site scripting (XSS) attack via crafted URL